CVE-2024-6833
1 advisory.
npm/@zowe/cli CVE-2024-6833: medium 5.9, EPSS 0.14%
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
Action: Upgrade @zowe/cli to 7.23.5 or later.
npm i @zowe/cli@7.23.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 7.18.0 | 7.23.5 | - |
Fixed versions
| 7.23.5 |
Sources
- osv: GHSA-ghgq-x6wc-6jr5
- https://nvd.nist.gov/vuln/detail/CVE-2024-6833
- https://github.com/zowe/zowe-cli/commit/6778da5e03c65dfcd3e6e4b4097b94d9fbd5d01b
- https://github.com/zowe/zowe-cli
CVE-2024-6833 · published · modified · JSON